File: //usr/local/CyberCP/lib/python3.10/site-packages/cryptography/x509/__pycache__/ocsp.cpython-310.pyc
o
�h#N � @ sb d dl mZ d dlZd dlZd dlZd dlmZmZ d dlm Z d dl
m Z m Z d dl
mZ d dlmZmZmZ G dd � d ej�ZG d
d � d ej�Ze je je je je jfZd!dd�Z G dd� dej�Z G dd� d�Z G dd� dej d�Z G dd� dej d�Z!G dd � d ej d�Z"e �#e j � e"�#e j"� e!�#e j!� G d d � d �Z$G d d � d �Z%e j&Z&e j'Z'dS )"� )� annotationsN)�utils�x509)�ocsp)�hashes�
serialization)� CertificateIssuerPrivateKeyTypes)�_EARLIEST_UTC_TIME�_convert_to_naive_utc_time�_reject_duplicate_extensionc @ s e Zd ZdZdZdS )�OCSPResponderEncodingzBy HashzBy NameN)�__name__�
__module__� __qualname__�HASH�NAME� r r �I/usr/local/CyberCP/lib/python3.10/site-packages/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )�OCSPResponseStatusr � � � � � N) r
r r �
SUCCESSFUL�MALFORMED_REQUEST�INTERNAL_ERROR� TRY_LATER� SIG_REQUIRED� UNAUTHORIZEDr r r r r s r � algorithm�hashes.HashAlgorithm�return�Nonec C s t | t�s td��d S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)�
isinstance�_ALLOWED_HASHES�
ValueError)r r r r �_verify_algorithm/ s
��r' c @ s e Zd ZdZdZdZdS )�OCSPCertStatusr r r N)r
r r �GOOD�REVOKED�UNKNOWNr r r r r( 6 s r( c @ s e Zd Zddd�ZdS )�_SingleResponse�cert�x509.Certificate�issuerr r! � cert_statusr( � this_update�datetime.datetime� next_update�datetime.datetime | None�revocation_time�revocation_reason�x509.ReasonFlags | Nonec C s t |tj�r t |tj�std��t|� t |tj�s td��|d ur,t |tj�s,td��|| _|| _|| _|| _ || _
t |t �sDtd��|t j urZ|d urQt
d��|d urYt
d��n$t |tj�sdtd��t|�}|tk rpt
d��|d ur~t |tj�s~td ��|| _|| _|| _d S )
N�%cert and issuer must be a Certificatez%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r$ r � Certificate� TypeErrorr' �datetime�_cert�_issuer�
_algorithm� _this_update� _next_updater( r* r& r
r � ReasonFlags� _cert_status�_revocation_time�_revocation_reason) �selfr- r/ r r0 r1 r3 r5 r6 r r r �__init__= s\ �
�
�
��� �
��
z_SingleResponse.__init__N)r- r. r/ r. r r! r0 r( r1 r2 r3 r4 r5 r4 r6 r7 )r
r r rF r r r r r, < s r, c @ s� e Zd Zeejddd���Zeejddd���Zeejddd ���Zeejdd d ���Z ejddd��Z
eejddd���Z dS )� OCSPRequestr" �bytesc C � dS �z3
The hash of the issuer public key
Nr �rE r r r �issuer_key_hash� � zOCSPRequest.issuer_key_hashc C rI �z-
The hash of the issuer name
Nr rK r r r �issuer_name_hash� rM z OCSPRequest.issuer_name_hashr! c C rI �zK
The hash algorithm used in the issuer name and key hashes
Nr rK r r r �hash_algorithm� rM zOCSPRequest.hash_algorithm�intc C rI �zM
The serial number of the cert whose status is being checked
Nr rK r r r �
serial_number� rM zOCSPRequest.serial_number�encoding�serialization.Encodingc C rI )z/
Serializes the request to DER
Nr �rE rU r r r � public_bytes� rM zOCSPRequest.public_bytes�x509.Extensionsc C rI )zP
The list of request extensions. Not single request extensions.
Nr rK r r r �
extensions� rM zOCSPRequest.extensionsN�r" rH �r" r! �r" rR �rU rV r" rH �r" rY ) r
r r �property�abc�abstractmethodrL rO rQ rT rX rZ r r r r rG � s$ rG )� metaclassc @ s� e Zd Zeejd"dd���Zeejd#dd���Zeejd#dd ���Zeejd$d d ���Z eejd%dd���Z
eejd%dd���Z eejd#dd���Z eejd#dd���Z
eejd&dd���Zeejd&dd���Zeejd'd d ���Zeejd(d d ���Zd!S ))�OCSPSingleResponser" r( c C rI �zY
The status of the certificate (an element from the OCSPCertStatus enum)
Nr rK r r r �certificate_status� rM z%OCSPSingleResponse.certificate_statusr4 c C rI �z^
The date of when the certificate was revoked or None if not
revoked.
Nr rK r r r r5 � rM z"OCSPSingleResponse.revocation_timec C rI �z�
The date of when the certificate was revoked or None if not
revoked. Represented as a non-naive UTC datetime.
Nr rK r r r �revocation_time_utc� rM z&OCSPSingleResponse.revocation_time_utcr7 c C rI �zi
The reason the certificate was revoked or None if not specified or
not revoked.
Nr rK r r r r6 � rM z$OCSPSingleResponse.revocation_reasonr2 c C rI �z�
The most recent time at which the status being indicated is known by
the responder to have been correct
Nr rK r r r r1 � rM z OCSPSingleResponse.this_updatec C rI �z�
The most recent time at which the status being indicated is known by
the responder to have been correct. Represented as a non-naive UTC
datetime.
Nr rK r r r �this_update_utc� rM z"OCSPSingleResponse.this_update_utcc C rI �zC
The time when newer information will be available
Nr rK r r r r3 � rM z OCSPSingleResponse.next_updatec C rI �zu
The time when newer information will be available. Represented as a
non-naive UTC datetime.
Nr rK r r r �next_update_utc� rM z"OCSPSingleResponse.next_update_utcrH c C rI rJ r rK r r r rL � rM z"OCSPSingleResponse.issuer_key_hashc C rI rN r rK r r r rO � rM z#OCSPSingleResponse.issuer_name_hashr! c C rI rP r rK r r r rQ � rM z!OCSPSingleResponse.hash_algorithmrR c C rI rS r rK r r r rT rM z OCSPSingleResponse.serial_numberN�r" r( �r" r4 �r" r7 �r" r2 r[ r\ r] )r
r r r` ra rb rf r5 ri r6 r1 rm r3 rp rL rO rQ rT r r r r rd � sJ rd c @ s e Zd ZeejdHdd���ZeejdIdd���ZeejdJd d
���ZeejdKd d
���Z eejdLdd���Z
eejdLdd���Z eejdMdd���Z eejdNdd���Z
eejdOdd���ZeejdPd d ���ZeejdPd d ���ZeejdQd"d#���ZeejdRd%d&���ZeejdRd'd(���ZeejdSd*d+���ZeejdPd,d-���ZeejdPd.d/���ZeejdRd0d1���ZeejdRd2d3���ZeejdLd4d5���ZeejdLd6d7���ZeejdTd9d:���ZeejdUd<d=���Z eejdVd?d@���Z eejdVdAdB���Z ejdWdEdF��Z dGS )X� OCSPResponser" �#typing.Iterator[OCSPSingleResponse]c C rI )z_
An iterator over the individual SINGLERESP structures in the
response
Nr rK r r r � responses rM zOCSPResponse.responsesr c C rI )zm
The status of the response. This is a value from the OCSPResponseStatus
enumeration
Nr rK r r r �response_status rM z OCSPResponse.response_status�x509.ObjectIdentifierc C rI )zA
The ObjectIdentifier of the signature algorithm
Nr rK r r r �signature_algorithm_oid rM z$OCSPResponse.signature_algorithm_oid�hashes.HashAlgorithm | Nonec C rI )zX
Returns a HashAlgorithm corresponding to the type of the digest signed
Nr rK r r r �signature_hash_algorithm" rM z%OCSPResponse.signature_hash_algorithmrH c C rI )z%
The signature bytes
Nr rK r r r � signature+ rM zOCSPResponse.signaturec C rI )z+
The tbsResponseData bytes
Nr rK r r r �tbs_response_bytes2 rM z OCSPResponse.tbs_response_bytes�list[x509.Certificate]c C rI )z�
A list of certificates used to help build a chain to verify the OCSP
response. This situation occurs when the OCSP responder uses a delegate
certificate.
Nr rK r r r � certificates9 rM zOCSPResponse.certificates� bytes | Nonec C rI )z2
The responder's key hash or None
Nr rK r r r �responder_key_hashB rM z OCSPResponse.responder_key_hash�x509.Name | Nonec C rI )z.
The responder's Name or None
Nr rK r r r �responder_nameI rM zOCSPResponse.responder_namer2 c C rI )z4
The time the response was produced
Nr rK r r r � produced_atP rM zOCSPResponse.produced_atc C rI )zf
The time the response was produced. Represented as a non-naive UTC
datetime.
Nr rK r r r �produced_at_utcW rM z OCSPResponse.produced_at_utcr( c C rI re r rK r r r rf _ rM z OCSPResponse.certificate_statusr4 c C rI rg r rK r r r r5 f rM z OCSPResponse.revocation_timec C rI rh r rK r r r ri n rM z OCSPResponse.revocation_time_utcr7 c C rI rj r rK r r r r6 v rM z OCSPResponse.revocation_reasonc C rI rk r rK r r r r1 ~ rM zOCSPResponse.this_updatec C rI rl r rK r r r rm � rM z OCSPResponse.this_update_utcc C rI rn r rK r r r r3 � rM zOCSPResponse.next_updatec C rI ro r rK r r r rp � rM z OCSPResponse.next_update_utcc C rI rJ r rK r r r rL � rM z OCSPResponse.issuer_key_hashc C rI rN r rK r r r rO � rM z OCSPResponse.issuer_name_hashr! c C rI rP r rK r r r rQ � rM zOCSPResponse.hash_algorithmrR c C rI rS r rK r r r rT � rM zOCSPResponse.serial_numberrY c C rI )zR
The list of response extensions. Not single response extensions.
Nr rK r r r rZ � rM zOCSPResponse.extensionsc C rI )zR
The list of single response extensions. Not response extensions.
Nr rK r r r �single_extensions� rM z OCSPResponse.single_extensionsrU rV c C rI )z0
Serializes the response to DER
Nr rW r r r rX � rM zOCSPResponse.public_bytesN)r" rv )r" r )r" ry )r" r{ r[ )r" r )r" r� )r" r� rt rq rr rs r\ r] r_ r^ ) r
r r r` ra rb rw rx rz r| r} r~ r� r� r� r� r� rf r5 ri r6 r1 rm r3 rp rL rO rQ rT rZ r� rX r r r r ru
s� ru c @ sF e Zd Zddg fd#d
d �Zd$dd�Zd%dd�Zd&d d �Zd'd!d"�ZdS )(�OCSPRequestBuilderN�request�Ftuple[x509.Certificate, x509.Certificate, hashes.HashAlgorithm] | None� request_hash�5tuple[bytes, bytes, int, hashes.HashAlgorithm] | NonerZ �(list[x509.Extension[x509.ExtensionType]]r" r# c C s || _ || _|| _d S �N)�_request�
_request_hash� _extensions)rE r� r� rZ r r r rF � s
zOCSPRequestBuilder.__init__r- r. r/ r r! c C sZ | j d us
| jd urtd��t|� t|tj�r t|tj�s"td��t|||f| j| j �S )N�.Only one certificate can be added to a requestr8 )
r� r� r& r' r$ r r9 r: r� r� )rE r- r/ r r r r �add_certificate� s ��z"OCSPRequestBuilder.add_certificaterO rH rL rT rR c C s� | j d us
| jd urtd��t|t�std��t|� t�d|� t�d|� |j t
|�ks5|j t
|�kr9td��t | j ||||f| j �S )Nr� z serial_number must be an integerrO rL z`issuer_name_hash and issuer_key_hash must be the same length as the digest size of the algorithm)
r� r� r& r$ rR r: r' r � _check_bytes� digest_size�lenr� r� )rE rO rL rT r r r r �add_certificate_by_hash� s&
��
�z*OCSPRequestBuilder.add_certificate_by_hash�extval�x509.ExtensionType�critical�boolc C sJ t |tj�s
td��t�|j||�}t|| j� t| j | j
g | j�|��S �Nz"extension must be an ExtensionType) r$ r �
ExtensionTyper: � Extension�oidr r� r� r� r� �rE r� r� � extensionr r r �
add_extension s �z OCSPRequestBuilder.add_extensionrG c C s& | j d u r| jd u rtd��t�| �S )Nz*You must add a certificate before building)r� r� r& r �create_ocsp_requestrK r r r �build! s
zOCSPRequestBuilder.build)r� r� r� r� rZ r� r" r# )r- r. r/ r. r r! r" r� )
rO rH rL rH rT rR r r! r" r� )r� r� r� r� r" r� )r" rG )r
r r rF r� r� r� r� r r r r r� � s �
r� c @ s` e Zd Zdddg fd5d
d �Zd6dd �Zd7d d!�Zd8d#d$�Zd9d)d*�Zd:d/d0�Ze d;d3d4��Z
dS )<�OCSPResponseBuilderN�response�_SingleResponse | None� responder_id�5tuple[x509.Certificate, OCSPResponderEncoding] | None�certs� list[x509.Certificate] | NonerZ r� c C s || _ || _|| _|| _d S r� )� _response�
_responder_id�_certsr� )rE r� r� r� rZ r r r rF ) s
z OCSPResponseBuilder.__init__r- r. r/ r r! r0 r( r1 r2 r3 r4 r5 r6 r7 r" c
C s< | j d ur td��t||||||||�} t| | j| j| j�S )Nz#Only one response per OCSPResponse.)r� r& r, r� r� r� r� )
rE r- r/ r r0 r1 r3 r5 r6 �
singlerespr r r � add_response6 s$
�
�z OCSPResponseBuilder.add_responserU r �responder_certc C sP | j d ur td��t|tj�std��t|t�s td��t| j||f| j | j
�S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) r� r& r$ r r9 r: r r� r� r� r� )rE rU r� r r r r� U s
��z OCSPResponseBuilder.responder_id�!typing.Iterable[x509.Certificate]c C s\ | j d ur td��t|�}t|�dkrtd��tdd� |D ��s$td��t| j| j|| j �S )Nz!certificates may only be set oncer z certs must not be an empty listc s s � | ] }t |tj�V qd S r� )r$ r r9 )�.0�xr r r � <genexpr>p s � z3OCSPResponseBuilder.certificates.<locals>.<genexpr>z$certs must be a list of Certificates)
r� r& �listr� �allr: r� r� r� r� )rE r� r r r r� h s
�z OCSPResponseBuilder.certificatesr� r� r� r� c C sN t |tj�s
td��t�|j||�}t|| j� t| j | j
| j g | j�|��S r� ) r$ r r� r: r� r� r r� r� r� r� r� r� r r r r� y s �z!OCSPResponseBuilder.add_extension� private_keyr r{ ru c C s6 | j d u r td��| jd u rtd��t�tj| ||�S )Nz&You must add a response before signingz*You must add a responder_id before signing)r� r& r� r �create_ocsp_responser r )rE r� r r r r �sign� s
�zOCSPResponseBuilder.signrx r c C s4 t |t�s td��|tju rtd��t�|d d d �S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r$ r r: r r& r r� )�clsrx r r r �build_unsuccessful� s
�
z&OCSPResponseBuilder.build_unsuccessful)r� r� r� r� r� r� rZ r� )r- r. r/ r. r r! r0 r( r1 r2 r3 r4 r5 r4 r6 r7 r" r� )rU r r� r. r" r� )r� r� r" r� )r� r� r� r� r" r� )r� r r r{ r" ru )rx r r" ru ) r
r r rF r� r� r� r� r� � classmethodr� r r r r r� ( s �
r� )r r! r" r# )(�
__future__r ra r; �typing� cryptographyr r �"cryptography.hazmat.bindings._rustr � cryptography.hazmat.primitivesr r �/cryptography.hazmat.primitives.asymmetric.typesr �cryptography.x509.baser r
r �Enumr r �SHA1�SHA224�SHA256�SHA384�SHA512r% r' r( r, �ABCMetarG rd ru �registerr� r� �load_der_ocsp_request�load_der_ocsp_responser r r r �<module> s>
�
F+] F T}